Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: The Eclipse Foundation Eclipse Jetty — DSA-5198 Clear all filters
TI-2022-01896 CVE-2022-2047 · GHSA-cj7v-27pg-wf7q

Improper input validation in Eclipse Jetty

Priority LOW 16

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid inpu…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01324 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-20
TI-2022-01897 CVE-2022-2048 · GHSA-wgmr-mf83-7x4j

Uncontrolled resource consumption in Eclipse Jetty

Priority LOW 38

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02562 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-410